Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
File: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json)
Hash identifier: KRv3f2y6u1YoLFXRET5SZvWMEUUTEg8VBMmtsDGmMlM=
Subject key identifier: E1:F4:95:44:06:6C:A6:A6:DD:3A:DD:64:74:E1:80:2B:E4:1E:8F:C3
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial: 019CAD22ABBC69EDEEF38B0B400F843E9875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
Manifest number: 0CB8
Signing time: Mon 02 Mar 2026 06:00:56 +0000
Manifest this update: Mon 02 Mar 2026 06:00:56 +0000
Manifest next update: Tue 03 Mar 2026 06:00:56 +0000
Files and hashes: 1: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: u4tTIMbxcyiBlBNwOLOR0ZqWTWgqNumEg8kWGv6bGc0=)
2: N0NwAtFb84h0xfganWJihzoCSpE.roa (hash: /Ubv+K+n65IZQaZN4AFBb/50l8Puw9jgWyG9wc4RYFM=)
3: OxaeKc7pRBgah12v_9xLvX75AHM.roa (hash: qygdd+Z/MhrVDqAYLLnF2qLBOy48W3eHlGWo3g+C2qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:ab:bc:69:ed:ee:f3:8b:0b:40:0f:84:3e:98:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Validity
Not Before: Mar 2 06:00:56 2026 GMT
Not After : Mar 3 06:00:56 2026 GMT
Subject: CN=e1f49544066ca6a6dd3add6474e1802be41e8fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:b4:62:79:3b:64:ed:68:01:7e:50:56:05:
ac:6a:5b:67:39:ab:39:0d:6c:56:a2:f7:6f:e0:9a:
5c:cb:c9:2b:67:d7:4c:c3:0d:43:99:f0:41:b5:32:
d7:dc:ad:a8:96:9a:e6:bb:53:04:bf:b1:1c:33:1d:
c9:16:d6:ba:85:0f:ee:db:ac:97:71:b8:27:7e:8c:
b1:e4:11:b1:f0:81:2e:dc:44:1c:0a:ea:6c:55:90:
6c:30:ea:9a:ce:e9:5b:fc:04:73:02:45:85:b5:f1:
50:af:27:57:52:98:3b:e7:a5:ee:7a:ac:37:bd:8a:
10:28:27:66:62:2d:2f:14:dc:8c:3f:ef:be:05:6d:
4f:76:ad:6c:a3:16:91:b7:9c:86:12:53:a0:76:ff:
65:0d:57:d5:a4:a6:24:f6:ce:24:ed:37:5f:15:27:
02:3e:79:72:a4:61:97:64:56:61:0b:9e:e2:01:3c:
d7:78:7f:f0:5f:35:41:be:d0:1e:35:ee:6f:d6:7d:
f1:71:cb:98:e0:04:cf:5b:02:3d:3f:90:1d:fd:5f:
5e:e5:fe:48:e9:fa:34:fa:a4:0b:0a:04:da:b0:d6:
5f:32:20:3f:5e:dc:b6:76:42:72:d3:0e:d2:7a:ef:
d2:ad:68:a9:f5:52:62:9a:36:b4:ed:9b:c8:f4:e9:
8a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F4:95:44:06:6C:A6:A6:DD:3A:DD:64:74:E1:80:2B:E4:1E:8F:C3
X509v3 Authority Key Identifier:
keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d3:9e:02:01:ce:fd:34:74:7a:14:76:4f:c8:b4:f6:42:35:
8a:57:02:a4:8e:2b:e9:55:ee:b5:6a:bc:00:09:bc:ac:72:6b:
86:9d:32:34:42:0b:1a:8a:5d:b7:a7:49:d5:6c:36:40:88:c8:
67:3d:f6:3c:a3:01:7b:51:5a:43:d6:de:c8:74:c5:ab:79:06:
44:10:ca:ec:d3:a8:ca:e0:0a:4b:ff:a0:f4:ff:cf:55:17:1f:
af:b8:90:c7:c5:2a:28:e2:0a:b5:f9:b1:ef:5b:6f:9a:ca:18:
dd:e4:1b:27:ab:f1:eb:86:a5:6f:7c:df:aa:ce:ce:c4:74:e4:
31:0c:44:1e:33:9e:aa:4d:46:df:64:8a:a4:98:ce:7d:7c:87:
d1:0a:e5:cc:4d:41:5c:31:74:95:0b:04:df:e5:74:c5:be:7f:
52:68:6b:07:80:19:28:ca:d9:63:a1:2d:ee:ff:03:32:0f:80:
8a:43:ba:dc:bd:7e:88:d4:6b:18:25:7d:49:b9:16:18:de:38:
0b:b3:dc:e6:56:08:e4:3b:6b:84:b9:52:c1:a5:c4:5b:1d:63:
dd:67:89:9e:29:78:d5:a1:66:a3:94:bd:73:59:d8:18:6e:f3:
f7:37:bb:a1:74:ad:5c:eb:9e:21:45:12:a6:89:90:b2:bc:a9:
f4:26:9c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:07 2026 by rpki-client